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Basis of the report 



International application No. 
PCT/SG 2002/000227 



1 . With regard to the elements of the international application: 
the international application as originally filed 

^ the description: 

pages ills , as originally filed 

pages , filed with the demand 

pages , filed with the letter of , 



the claims: 

pages 1 5 . as originally filed 

pages , as amended (together with any statement) under Article 1 9 

pages , filed with the demand 



pages 14. 16. 17. filed with the letter of 4 February 2005 (Q4>02.2Q05V 

^ the drawings: 

pages 1-7 , as originally filed 

pages , filed with the demand 

pages , filed with the letter of , 

the sequence listing part of the description: 

pages , as originally filed 

pages . filed with the demand 

pages , filed with the letter of , 



With regard to die language, all the elements marked above were available or furnished to this Authority in the language in 

which the international plication was filed, unless odierwise indicated under this item. 

These elements were ayailable or fiimished to this Authority in the following language which is: 



Q the language of a translation fimiished for the purposes of international search (under Rule 23.1(b)). 

□ the language of publication of the international application (under Rule 48.3(b)). 

the language of the translation furnished for the puiposes of international preliminary examination (under Rule 55.2 and/ 
or 55.3). 

With regard to any nucleotide and/or amino acid sequence disclosed in the international application, the intemational 
preliminary examination was carried out on the basis of tiie sequence listing: 

□ contained in the intemational application in printed form. 

□ 

filed together with the intemational application in computer readable form. 

□ furnished subsequently to this Authority in written form. 

□ furnished subsequently to this Authority in computer readable form. 

The statement that the subsequently furnished written sequence listing does not go beyond the disclosure in the 
intemational application as filed has been furnished. 

Ihe statement that the information recorded in con^uter readable form is identical to the written sequence listing has 
been furnished. 

^ The amendments have resulted in the cancellation of: 

I I the description, pages ^ 

13 the claims. Nos. 21. 22. 

□ the drawings, sheets/fig . 



CH This report has been established as if (some of) the amendments had not been made, since they have been considered to go 
beyond the disclosure as filed, as indicated in the Supplemental Box (Rule 70.2(c)).** 

* Replacement sheets which have been furnished to the receiving Office in response to an invitation under Article 14 are referred to 
in this report as ^originally filed " and are not annexed to this report since they do not contain amendments (Rules 70.16 and 
10.17). 

** Any replacement sheet containing such amendments must be referred to under item 1 and annexed to this report. 
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I V. Reasoned statement under Article 35(2) with regard to novelty, inventive step or industrial applicability; 
citations and explanations supporting such statement 



Statement 
Novelty (N) 



Claims _20 



YES 



Claims 



NO 



Inventive step (IS) 



Claims 1-20 



YES 



Claims 



NO 



Industrial applicability (lA) Claims -| „20 



YES 



Claims 



NO 



Citations and explanations (Rule 70.7) 



' The following documents have been cited in the Search Report: 

D1: WO1995/016238A1 
D2: EP1 085521 A1 
D3: US5469564A 
D4: JP2002222022A 



Documents D1-D3 deal with data storage devices featuring provisions for controlled 

access to stored data. D4, in turn, shows an electronic appliance equipped with an 
I automatic shutdown algorithm executable upon the attempt of unauthorised use. 

Document D1 is considered to form the closest state of the art regarding the present 
I application. Some of the most relevant features of claim 1 , such as an authentication 

sequence and algorithm being stored in a read-only memory and the presence of a 

logic circuit for the execution of the authentication process of a received password in 
I order to grant or deny access to stored, data are explicitly mentioned. 

However, with the amendments of the claims additional features - which are within the 
[scope of the initial disclosure - have been added to claim 1. One of these features 
I concerns the encryption of received data in the device before usage of the data in the 
I host and is not disclosed in any of the cited documents. Claim 1 is therefore regarded 

inventive in view of the state of the art. 

[Accordingly, also the claims 2-17 dependent on claim 1 can now be considered 
involving an inventive step as well as claims 18-20 have already been before. 
Summarising, all claims are now after amendment regarded to be novel and involving 

I an inventive step. Industrial applicability is given. 
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CLAIMS 

. 1 . An autlientication system to vei;ify a password, the system being arranged 
for coupling to a host for communication therewith, and comprising: 

a first storage unit to store an authentication sequence; 

a read-only memory linit to store an authentication algorithm; 

a microcontroller coupled to said first storage unit, said read-only memory unit 
and a web server, wherein said microcontroller is to receive said password and execute 
said authentication algorithm and Avherein said authentication algorithm is to verify said 
password with said authentication sequence; and 

a second storage unit coupled to said microcontroller to store data &om said.web 
server and wherein access to said secofld storage unit is permitted, by said miciocontroUer 
only if said password has been verified, 

wherein the system is arranged-to receive data firom the web server, via the host, 
in encrypted form and to decrypt that data before use thereof in the host. 

2. The authentication system as recited in claim 1, wherein, the password is 
received by said microcontroller fi-om said host. 

3. The auflientication system as recited in claim 2, wherem said read-only 
memory unit. Arther comprises a shutdown algorithm to shut down said host and said 
authentication system aftor . a number of incorrect passwords is received by said 
microcontroller. 



■ 4. .The authentication system as recited in claim 2, wherein said password is 
received by said host from said web server. 



5. The authentication system as recited in . claim 2, wherein said 
authentication algorithm is hard coded on one of a group consisting of a firmware and a 
hardware in saidmicrocontroUer. 
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14- Tlie authentication system as recited in claim 12, wherein said 
authentication sequence is hash-coded. ' 

15. * . The authentication system as recited in claim 1, wherein said first storage 
unit is located within said read-only memoiy imit md wherein said authentication 
sequence is hard coded into said first storage unit 

16. The authentication system asf recited in claim 15, wherein said second 
storage area fiirther comprises a public storage area and a private storage area* 

17. The authentication system as recited in claim liS, wh^ein said first storage 
unit is located within said private storage area of said second storage area. 

18. . A method for authenticating a password, comprising: 

coupling an authentication system to a host for communication therewith; 

the system receiving said password; 

the system receiving data firom a web server, via the host, in encrypted form, 
wherein said data is stored in a storage imit of the system; 

the system providing an authentication sequence; 

the system executing an authentication algorithm to verify said password with 
said authentication sequence, whereux said authentication algorithm is stored on a read- 
only memory unit of the system; 

the system permitting access to said data on said storage unit only if said " 
password is verified; and 

the system decrypting the data before use in the host. 

19. The method for authenticating a password as recited in claim 18^ wherem 
said password is recdved jfrom said web. server. 
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20. Hie method for authenticating a password as recited in claim 19, wherein 
said password is entered by a user. 
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